It shouldn't be necessary to send sound recordings to Amazon or Google to be recognized there. Speech recognition can take place locally, and data that are sent out of the house can be reduced to the minimum necessary to execute the requested function. Certainly a command to turn on the lights doesn't have to leave the premises.

I suppose Amazon and Google have no interest in a redesign that would respect privacy more, but perhaps a competitor will enter the market.